Known Vulnerabilities for products from Logicaldoc
Listed below are 15 of the newest known vulnerabilities associated with the vendor "Logicaldoc".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2025-45870 json | Not Provided | 2026-07-16 | 2026-07-20 | |
| CVE-2025-45869 json | Not Provided | 2026-07-13 | 2026-07-13 | |
| CVE-2025-45868 json | Not Provided | 2026-07-16 | 2026-07-20 | |
| CVE-2025-12547 json | A vulnerability was identified in LogicalDOC Community Edition up to 9.2.1. This vulnerability affects unknown code of the fi... | Not Provided | 2025-10-31 | 2026-04-29 |
| CVE-2025-12546 json | A vulnerability was determined in LogicalDOC Community Edition up to 9.2.1. This affects an unknown part of the component API... | Not Provided | 2025-10-31 | 2026-04-29 |
| CVE-2025-11946 json | A security flaw has been discovered in LogicalDOC Community Edition up to 9.2.1. This issue affects some unknown processing o... | Not Provided | 2025-10-19 | 2026-04-29 |
| CVE-2022-47418 json | LogicalDOC Enterprise and Community Edition (CE) are vulnerable to a stored (persistent, or "Type II") cross-site scripting (... | 5.4 - MEDIUM | 2023-02-07 | 2023-02-16 |
| CVE-2022-47417 json | LogicalDOC Enterprise and Community Edition (CE) are vulnerable to a stored (persistent, or "Type II") cross-site scripting (... | 5.4 - MEDIUM | 2023-02-07 | 2023-02-16 |
| CVE-2022-47416 json | LogicalDOC Enterprise is vulnerable to a stored (persistent, or "Type II") cross-site scripting (XSS) condition in the in-app... | 5.4 - MEDIUM | 2023-02-07 | 2023-02-16 |
| CVE-2022-47415 json | LogicalDOC Enterprise and Community Edition (CE) are vulnerable to a stored (persistent, or "Type II") cross-site scripting (... | 5.4 - MEDIUM | 2023-02-07 | 2023-02-16 |
| CVE-2020-13542 json | A local privilege elevation vulnerability exists in the file system permissions of LogicalDoc 8.5.1 installation. Depending o... | 7.8 - HIGH | 2020-12-03 | 2022-06-07 |
| CVE-2020-10366 json | LogicalDoc before 8.3.3 allows /servlet.gupld Directory Traversal, a different vulnerability than CVE-2020-9423 and CVE-2020-... | 7.5 - HIGH | 2020-04-08 | 2020-04-09 |
| CVE-2020-10365 json | LogicalDoc before 8.3.3 allows SQL Injection. LogicalDoc populates the list of available documents by querying the database. ... | 6.5 - MEDIUM | 2020-03-18 | 2020-03-27 |
| CVE-2020-9423 json | LogicalDoc before 8.3.3 could allow an attacker to upload arbitrary files, leading to command execution or retrieval of data ... | 9.8 - CRITICAL | 2020-03-18 | 2020-03-20 |
| CVE-2019-9723 json | LogicalDOC Community Edition 8.x before 8.2.1 has a path traversal vulnerability that allows reading arbitrary files and the ... | 7.1 - HIGH | 2019-05-30 | 2019-06-11 |
| CVE-2017-1000023 json | LogicalDoc Community Edition 7.5.3 and prior is vulnerable to an XSS when using preview on HTML document. | Not Provided | 2017-07-17 | 2025-04-20 |
| CVE-2017-1000022 json | LogicalDoc Community Edition 7.5.3 and prior contain an Incorrect access control which could leave to privilege escalation. | Not Provided | 2017-07-17 | 2025-04-20 |
| CVE-2017-1000021 json | LogicalDoc Community Edition 7.5.3 and prior is vulnerable to XXE when indexing XML documents. | Not Provided | 2017-07-17 | 2025-04-20 |
Known software with vulnerabilities from Logicaldoc
| Type | Vendor | Product | Version |
|---|---|---|---|
| Application | Logicaldoc | Logicaldoc | 3.6 |